PT-2021-11202 · Modx · Modx Cms
CVSS v3.1
9.1
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
MODX CMS version 2.7.3
Description:
A XML External Entity (XXE) vulnerability was discovered in the modRestServiceRequest component which can lead to an information disclosure or denial of service (DOS).
Recommendations:
For MODX CMS version 2.7.3, consider disabling the modRestServiceRequest component until a patch is available to prevent potential information disclosure or denial of service attacks.
Exploit
Fix
DoS
XXE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Modx Cms